PRSEC-2439 Remove secrets from logged presigned URLs

[adi-benz]

Remove secrets from URLs when logging.

We use go-retryablehttp when uploading data to presigned URLs and retries are logging the URLs.

Before:

time=2025-07-06T21:56:49.423+03:00 level=DEBUG msg="retrying request" request="GET http://127.0.0.1:61087?X-Amz-Credential=SECRET&X-Amz-Signature=SECRET&X-Amz-Security-Token=SECRET (status: 500)" timeout=1s remaining=4

After:

time=2025-07-06T21:55:37.272+03:00 level=DEBUG msg="retrying request" request="GET http://127.0.0.1:61004 (status: 500)" timeout=1s remaining=4

[wiz-inc-wiz-sec]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities
Sensitive Data
Secrets
IaC Misconfigurations
SAST Findings	1
Total	1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.